Allow Surge to connect to OpenConnect by running OpenConnect and Snell Server (V4) inside a docker container.

docker pull sukka/openconnect-snell:latest

docker run -d \
  --privileged \
  -e VPN_USER= \
  -e VPN_PASSWORD= \
  -e VPN_AUTH_CODE= \
  -e VPN_AUTH_GROUP= \
  -e VPN_SERVERCERT= \
  -e VPN_HOST= \
  -e SNELL_OBFS=off \
  -p [Your Port]:8388 \
  --restart always \
  --name openconnect-snell sukka/openconnect-snell

[Proxy]
Proxy-Snell = snell, [Container IP], [Your Port], psk=password, version=4

• SNELL_HOST: Where the Snell Server will be listened at. Default is 0.0.0.0.

• SNELL_PORT: Which Port that the Snell Server will be listened at. Default is 8388.

• SNELL_PSK: Snell Server Pre-Shared Key. Will be generated automatically when not provided.

• SNELL_OBFS: Snell Server obfuscation mode. Default is off.

• VPN_USER: OpenConnect Username. Required.

• VPN_PASSWD: OpenConnect Password. Required.

• VPN_HOST: Where the OpenConnect will be connected to. Required.

• VPN_SERVERCERT: OpenConnect server certificate fingerprint to trust. Useful when the server configured certificate is untrusted. Optional.

• VPN_AUTH_GROUP: OpenConnect authentication group. Optional.

• VPN_AUTH_CODE: OpenConnect authentication code. Optional.

• VPN_NO_DTLS: Disable OpenConnect DTLS. Optional.

MIT

openconnect-snell © Sukka, Released under the MIT License. Authored and maintained by Sukka with help from contributors (list).

Personal Website · Blog · GitHub @SukkaW · Telegram Channel @SukkaChannel · Mastodon @[email protected] · Twitter @isukkaw · Keybase @sukka